...

• Security Level Low
  • Inventory objects are automatically signed with the Private Key that is stored with the root account.
  • Signing is automatically applied when performing the Deploy operation.
• Security Level Medium
  • Inventory objects are automatically signed with the Private Key that is stored with the user's account.
  • Signing is automatically applied when performing the Deploy operation.
• Security Level High
  • Scheduling objects are signed outside of JOC Cockpit:
    • Scheduling objects are exported using the Export operation and the option For signing.
    • The export archive file is transferred to a secure device, e.g. to a secure desktop machine.
    • The export archive file is extracted and each scheduling object file included is signed individually. 
      • The JS7 offers script solutions, see JS7 - Signing Workflows for High Security Level.
      • For example the OpenSSL command line utility can be used.
      • The signing step includes to create a signature file for each scheduling object file with the same name and the extension .sig (using X.509 certificates) or .asc (using PGP keys).
    • The scheduling object files and signature files are added to the same or to a new archive file.
  • The archive file that includes the scheduling object files and signature files is imported to JOC Cockpit. The deployment step is performed inline with the import step.

...

Resources

• JS7 - Deployment of Workflows for High Security Level
• JS7 - Signing Workflows for High Security Level
• JS7 - How to create X.509 Signing Certificates

...